Staff Compliance Analyst - AI-Driven Cloud Security & GRC

ServiceNow; Ontario (CA); Remote; USD 103,000 - 181,000; Full time

Benefits offered by this job

Health plans

ESPP

Matching donations

Flexible time away plan

Family leave programs

Job summary

ServiceNow is seeking a Staff Compliance Analyst within the Security Organization to lead and execute certification programs, collaborate with Sales, Security, and Operations, and drive testing and improvements across cloud security controls. The role requires deep knowledge of governance, risk and compliance processes and the ability to scale compliance through AI-enabled approaches.

You will contribute to defining security and compliance frameworks for a leading cloud platform, analyzing

Qualifications

• 8+ years working in cyber security compliance, security risk or auditor-like roles.
• Direct experience with multiple compliance programs (ISO 27001, PCI, UK Cyber Essentials Plus, SOC2) is preferred.
• Experience in SaaS/Cloud security and working in Security & Compliance groups.

Responsibilities

• Measure and monitor compliance with company policies and procedures.
• Facilitate certifier requests and information gathering for audits.
• Lead onsite and remote audits (certification and customer audits).
• Coordinate with Risk Management on security risk assessments.
• Drive security compliance testing across teams.
• Assist customers in understanding ServiceNow’s security controls.
• Enhance the GRC tool and processes to meet business needs.

Skills

AI in work processes

Security compliance

Audit coordination

GRC tooling

Security risk assessment

Tools

GRC system

Job description

ServiceNow is seeking a Staff Compliance Analyst within the Security Organization to lead and execute certification programs, collaborate with Sales, Security, and Operations, and drive testing and improvements across cloud security controls. The role requires deep knowledge of governance, risk and compliance processes and the ability to scale compliance through AI-enabled approaches.

You will contribute to defining security and compliance frameworks for a leading cloud platform, analyzing